Privacy Policy

1. Data controller

The data controller responsible for the processing described in this policy is:

Company

Selimcan Yazılım Sanayi ve Ticaret Limited Şirketi

Address

Kozlu Mahallesi, Söbece Sokak No: 5-1, İç Kapı No: 1, 55080 Canik/Samsun, Türkiye

MERSİS number

0760104384500001

Email

info@selimcan.com

Phone

+90 534 647 19 98

For any question about this policy or your personal data, contact us at info@selimcan.com.

2. Visiting our website

A hosting and content delivery provider hosts our website and delivers it through its network. When you open a page, your browser sends technical data to this network. The data is collected automatically by electronic means. It includes:

• your IP address
• the date and time of the request
• the requested page and the amount of data transferred
• the referring page (referrer)
• your browser type and version, and your operating system (user agent)

The provider processes this data to deliver the website to you, to keep it secure and stable, and to detect and stop attacks and abuse. The legal basis is our legitimate interest in operating a secure website (GDPR Article 6(1)(f); KVKK Article 5(2)(f)).

We keep no server logs of our own. The provider shows us aggregated traffic statistics. If its security features block or challenge a request, the provider can show us the IP address and the details of that request for a limited period that the provider sets.

3. Cookies

Our website sets no cookies itself. To tell legitimate visitors apart from automated traffic, the provider may set strictly necessary security cookies, such as __cf_bm. These cookies are used only for security and expire after 30 minutes at the latest.

The legal basis is our legitimate interest in the secure delivery of our website (GDPR Article 6(1)(f); KVKK Article 5(2)(f)). Strictly necessary cookies do not require consent.

4. Analytics and tracking

Our website currently uses no analytics, advertising, or tracking tools. Fonts, scripts, and all other files come from our own domain, so your browser contacts no third-party services when you visit our website. If we add such tools, we will update this policy first and ask for your consent where the law requires it.

5. Contacting us

When you contact us by email or phone, we process the data that you give us, such as your name, email address, phone number, company, and the content of your message. We collect this data directly from you.

We process this data to answer your request and, where applicable, to take steps before entering into a contract or to perform a contract. The legal bases are GDPR Article 6(1)(b) and (f), and KVKK Article 5(2)(c) and (f). Where the law requires us to keep business correspondence, the legal basis is our legal obligation (GDPR Article 6(1)(c); KVKK Article 5(2)(ç)).

We keep correspondence that relates to a business relationship for the periods that the Turkish Commercial Code and the tax laws set, which are up to 10 years. We keep other correspondence only for as long as we need it for its purpose, and then we delete it.

6. Recipients

We share personal data only with the following recipients, and only as far as necessary:

• our hosting and content delivery provider (see Section 2)
• our email service provider, which hosts our company mailboxes
• our financial adviser (mali müşavir), for documents about a contract, such as invoices
• public authorities and courts, where the law requires us to disclose data

Our service providers process personal data on our instructions and under their data processing terms. On request, we tell you the names of the service providers that received your data.

7. Transfers abroad

Our hosting and content delivery provider runs a global network, and our email service provider processes data in several countries. Both providers may process data outside Türkiye and outside the European Economic Area, including in the United States.

In their data processing terms, these providers commit to protecting the data, including through the standard contractual clauses approved by the European Commission and, where applicable, the EU-U.S. Data Privacy Framework.

8. Your rights

Under Article 11 of the KVKK, you have the right to:

• learn whether your personal data is processed
• request information about the processing, if your data has been processed
• learn the purpose of the processing and whether your data is used in line with that purpose
• know the third parties in Türkiye or abroad to whom your data is transferred
• request the correction of incomplete or inaccurate data
• request the erasure or destruction of your data under the conditions in Article 7 of the KVKK
• request that third parties to whom your data was transferred are notified of any correction, erasure, or destruction
• object to a result to your disadvantage that arises exclusively from the automated analysis of your data
• claim compensation for damage caused by the unlawful processing of your data

Under the GDPR, you have the right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), and data portability (Article 20). You can also object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (Article 21).

9. How to exercise your rights

You can send your request in writing to our address in Section 1, or by email to info@selimcan.com. Requests under the GDPR need no particular form. We may ask for additional information to confirm your identity.

Requests under the KVKK follow the Communiqué on the Procedures and Principles of Application to the Data Controller. Email requests must be signed with a secure electronic signature or a mobile signature, or sent from an email address that you have notified to us before and that is registered in our systems. Your request must include your name and surname, your signature for written requests, your Turkish identity number (for foreign nationals, your nationality and your passport or identity number), your address for notifications, your email address and phone number if any, and the subject of your request.

We answer requests free of charge and as soon as possible, at the latest within one month under the GDPR and within 30 days under the KVKK. If answering a KVKK request causes additional costs, we may charge the fee set by the Turkish Personal Data Protection Board.

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work or where the alleged infringement took place (GDPR Article 77). Under the KVKK, you can file a complaint with the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) within 30 days of learning our answer, and in any case within 60 days of your application (KVKK Article 14).

10. Security

We protect personal data with appropriate technical and organizational measures. Our website is available only over encrypted connections (HTTPS/TLS), and access to our systems and mailboxes is limited to authorized persons.

11. Automated decisions and children

We do not make decisions based solely on automated processing, including profiling. Our website is not directed at children.

12. Changes to this policy

We update this policy when our processing or the law changes. The date at the top of this page shows the current version.

This policy is also available in Turkish as the KVKK information notice. If the two versions differ, the Turkish version prevails.